Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/r0Bxokr0EMaMGh4x7oJ9g3w43zU.roa
File: r0Bxokr0EMaMGh4x7oJ9g3w43zU.roa (raw, json)
Hash identifier: rGthCra4iInUGBnwqE6XtuBmvD1QOhN65b5KwVgm2ro=
Subject key identifier: AF:40:71:A2:4A:F4:10:C6:8C:1A:1E:31:EE:82:7D:83:7C:38:DF:35
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A0A50A4148D7491FB1907D406DBB3936F3
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/r0Bxokr0EMaMGh4x7oJ9g3w43zU.roa
Signing time: Tue 15 Sep 2026 12:28:27 +0000
ROA not before: Tue 15 Sep 2026 12:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216078
IP address blocks: 193.178.226.0/24 maxlen: 24
193.200.78.0/24 maxlen: 24
2a0f:9b40::/29 maxlen: 29
2a10:3f80::/29 maxlen: 29
2a10:77c0::/29 maxlen: 29
2a13:b4c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a14:1100::/29 maxlen: 29
2a14:68c0::/29 maxlen: 29
2a14:6a40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Sep 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:0a:41:48:d7:49:1f:b1:90:7d:40:6d:bb:39:36:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 15 12:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af4071a24af410c68c1a1e31ee827d837c38df35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:6e:39:c5:0c:cc:56:7f:69:d6:c9:56:cd:
4e:83:aa:f6:8c:c0:65:c6:46:c6:5f:cc:a2:96:d0:
b7:0f:34:06:9e:eb:03:6e:21:fc:a4:4b:2a:be:1a:
b9:b4:84:41:6d:b3:0d:82:57:b0:7c:05:3f:35:07:
f8:af:80:1d:a0:fa:63:18:db:96:39:c8:16:7e:5d:
98:1d:9d:7a:91:b7:85:fb:bf:09:a5:74:1d:f9:4a:
8c:df:cb:ae:3e:b8:24:57:d7:ec:d9:08:8a:b0:14:
49:41:89:fc:fb:07:c2:78:c7:20:25:e0:7b:58:13:
cf:08:ba:e7:0a:0b:c8:3e:87:da:0f:7f:da:40:07:
dd:01:90:ab:c5:c1:6e:92:32:95:c8:b6:6b:e6:97:
69:85:0f:f0:ef:48:11:b5:05:38:c9:9d:19:ed:47:
0d:b3:8e:14:a9:86:26:63:c7:6b:e8:6e:81:14:8c:
0e:5c:09:9b:c4:6e:5a:b9:f8:ea:37:03:32:4b:7f:
28:47:e3:9f:89:92:6a:b8:0c:21:2e:91:7d:ee:b8:
a9:1c:12:04:0a:db:4d:3f:54:78:73:ef:4c:d1:7f:
53:0d:a0:1f:c1:32:43:a8:3d:e2:97:9a:dd:f7:d4:
3f:3a:79:48:4e:c0:a0:19:ea:7f:b5:48:25:97:97:
3e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:40:71:A2:4A:F4:10:C6:8C:1A:1E:31:EE:82:7D:83:7C:38:DF:35
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/r0Bxokr0EMaMGh4x7oJ9g3w43zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.226.0/24
193.200.78.0/24
IPv6:
2a0f:9b40::/29
2a10:3f80::/29
2a10:77c0::/29
2a13:b4c0::/29
2a13:bb40::/29
2a14:1100::/29
2a14:68c0::/29
2a14:6a40::/29
Signature Algorithm: sha256WithRSAEncryption
3a:2a:58:a6:9f:24:e3:f3:e7:bc:d9:78:94:d8:5c:6e:13:d0:
b1:42:e2:6a:20:88:9e:b4:bb:d0:b8:77:d3:7f:71:4e:2d:09:
ed:7a:bb:e9:ea:fd:4c:1a:2b:95:a6:03:69:12:71:01:10:d8:
f5:a5:55:cd:17:85:50:92:b7:ad:cb:8b:e3:98:9d:d3:79:d3:
3e:94:ad:ec:06:c0:e4:8d:63:47:25:56:66:8f:f5:36:6b:0c:
4e:a6:b1:3c:1a:74:04:98:c6:ec:4f:2b:19:9c:e7:7e:55:bc:
b0:40:aa:bc:9c:7b:61:97:73:b3:6c:23:d5:96:4c:6b:8a:33:
82:06:b6:9d:64:fd:ca:52:53:c1:be:93:46:e2:c5:2f:04:69:
6b:de:31:b5:1c:e2:5b:57:cb:dc:9b:a1:76:09:db:ca:e7:ae:
17:07:3a:c9:49:be:c7:1b:7b:9c:94:1b:5b:f4:8f:05:dd:ff:
f3:36:77:b9:82:37:08:fb:cc:87:f1:a2:cf:b3:0a:70:87:13:
b1:cd:65:c7:3f:2b:32:44:e0:d0:aa:f9:2c:40:46:9a:f5:85:
a0:fe:10:2b:a2:82:69:08:18:6c:2d:99:87:97:c5:eb:50:04:
19:5a:c6:d8:d7:e0:0c:e6:20:10:0a:e5:00:14:98:73:26:f3:
a7:0c:65:ab
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAaClCkFI10kfsZB9QG27OTbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwOTE1MTIyODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjQwNzFhMjRhZjQxMGM2OGMxYTFlMzFlZTgyN2Q4MzdjMzhkZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH5uOcUMzFZ/adbJVs1Og6r2jMBl
xkbGX8yiltC3DzQGnusDbiH8pEsqvhq5tIRBbbMNglewfAU/NQf4r4AdoPpjGNuW
OcgWfl2YHZ16kbeF+78JpXQd+UqM38uuPrgkV9fs2QiKsBRJQYn8+wfCeMcgJeB7
WBPPCLrnCgvIPofaD3/aQAfdAZCrxcFukjKVyLZr5pdphQ/w70gRtQU4yZ0Z7UcN
s44UqYYmY8dr6G6BFIwOXAmbxG5aufjqNwMyS38oR+OfiZJquAwhLpF97ripHBIE
CttNP1R4c+9M0X9TDaAfwTJDqD3il5rd99Q/OnlITsCgGep/tUgll5c+pQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFK9AcaJK9BDGjBoeMe6CfYN8ON81MB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvcjBCeG9rcjBFTWFNR2g0eDdvSjlnM3c0M3pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDASBAIAATAMAwQAwbLiAwQA
wchOMD4EAgACMDgDBQMqD5tAAwUDKhA/gAMFAyoQd8ADBQMqE7TAAwUDKhO7QAMF
AyoUEQADBQMqFGjAAwUDKhRqQDANBgkqhkiG9w0BAQsFAAOCAQEAOipYpp8k4/Pn
vNl4lNhcbhPQsULiaiCInrS70Lh3039xTi0J7Xq76er9TBorlaYDaRJxARDY9aVV
zReFUJK3rcuL45id03nTPpSt7AbA5I1jRyVWZo/1NmsMTqaxPBp0BJjG7E8rGZzn
flW8sECqvJx7YZdzs2wj1ZZMa4ozgga2nWT9ylJTwb6TRuLFLwRpa94xtRziW1fL
3JuhdgnbyueuFwc6yUm+xxt7nJQbW/SPBd3/8zZ3uYI3CPvMh/Giz7MKcIcTsc1l
xz8rMkTg0Kr5LEBGmvWFoP4QK6KCaQgYbC2Zh5fF61AEGVrG2NfgDOYgEArlABSY
cybzpwxlqw==
-----END CERTIFICATE-----
Generated at Wed Sep 16 05:55:29 2026 by rpki-client